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Forensic Digital Watermarking With Variable Orientation and 

Protocols 

Technical Field 

The invention relates to digital watermarking and forensic tracking of audio- 
visual content. 

Background and Summary 

Digital watermarking is a process for modifying physical or electronic media to 
embed a hidden machine-readable code into the media. The media may be modified such 
that the embedded code is imperceptible or nearly imperceptible to the user, yet may be 
detected through an automated detection process. Most commonly, digital watermarking 
is applied to media signals such as images, audio signals, and video signals. However, it 
may also be applied to other types of media objects, including documents (e.g., through 
line, word or character shifting), software, multi-dimensional graphics models, and 
surface textures of objects. 

Digital watermarking systems typically have two primary components: an 
encoder that embeds the watermark in a host media signal, and a decoder that detects and 
reads the embedded watermark from a signal suspected of containing a watermark (a 
suspect signal). The encoder embeds a watermark by subtly altering the host media 
signal. The reading component analyzes a suspect signal to detect whether a watermark 
is present. In applications where the watermark encodes information, the reader extracts 
this information from the detected watermark. 

Several particular watermarking techniques have been developed. The reader is 
presumed to be familiar with the literature in this field. Particular techniques for 
embedding and detecting imperceptible watermarks in media signals are detailed in the 
assignee's co-pending application serial numbers 09/503,881 and 09/661,900, and US 
Patent 6,122,403, which are hereby incorporated by reference. In this document, we use 
the term "watermark" to refer to a digital watermark. 
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In some applications, digital watermarks carry a content identifier that identifies 
the content (e.g., image, song, or program identifier). In such applications, each version 
of the content has the same watermark signal, and if two or more pieces of the content are 
averaged together, the watermark remains the same. This happens since two or more 
5 identical watermarks are averaged, resulting in the same watermark signal. In addition, 
watermark embedders in such a scheme are often designed to prevent a new content ID 
from being embedded over a content signal containing an existing content ID. Thus, the 
watermark embedder cannot be used to over-embed the existing watermark with a 
different content ID. 

10 However, watermarks can be used to forensically track every place the content 

has been received and/or viewed by embedding a watermark at every receiving and/or 
viewing system that identifies that system. For example, a cable set top box (STB) can 
embed the 32-bit smart card ID into every premium movie received as a forensic 
watermark. A database protected for privacy can be maintained by the manufacturer of 

15 the smart card system that links this 32 bit ID to the user's name and address. If 

illegitimate movies are found by content owners, this forensic watermark can be read 
from these movies, and used to obtain a search warrant to obtain the user's name and 
address from the manufacturers database. 

In this configuration, different watermarks can be embedded in identical content, 

20 and different watermarks can be embedded in one piece of content. Expanding the 

example above, one premium movie will have two different 32 bit IDs when received by 
two different STBs. Similarly, if the STBs share movies, as done with the SonicBLUE 
ReplayTV 4000, a movie that is sent from one STB to another can have two different 
forensic watermarks, known as generational forensic tracking. 

25 As such, pirates can use averaging or over-embedding to disable watermark 

detection with many watermark protocols. Continuing with the above example, two or 
more STBs could be owned by a pirate, who averages the output video in a video mixer 
to remove many watermarking methods. Similarly, the pirate could pass the video 
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sequentially through two or more STBs to stop watermark detection with many methods 

by overlaying several watermarks on top of each other. 

The example architecture used above is applicable to broadcasts, where the 

forensic watermark embedder must be located in the broadcast receiver, which is usually 
5 a consumer device inside the home. For Internet streaming, the embedder can be located 

in the stream server since current unicast methods use point-to-point connections. 

Alternatively, the embedder can be located in the receiving device, once again, probably 

inside a PC within the consumer's home. The latter method will enable forensic tracking 

for multicast Internet streams. 
10 The invention provides a method of forensic digital watermarking. The method 

selects an orientation for a forensic digital watermark signal to be embedded in the 
□ content signal. It then embeds the forensic digital watermark signal at the selected 

v - orientation in the content signal. The embedding applies a different orientation to the 

Sj digital forensic watermark for each instance of embedding the watermark. 

Z'l 15 There are number of variations and enhancements to this method of embedding a 

N forensic digital watermark. For example, the embedder may insert the forensic 

watermark for each instance of embedding using different random carrier or mapping 

f \ 1 

?7 keys, different segmenting in time for time-based content, such as audio and video, 

W and/or different segmenting over space for space-based content, such as images and 

P 20 video. The variations in embedding of the forensic watermark allow several different 
forensic watermarks to exist in content without confusing the detector. In addition, the 
randomization for each embedding process of each of these approaches improves the 
resistance to averaging and over-embedding attacks. 

In addition, this method enables generational forensic tracking because it allows 
25 multiple forensic watermarks to co-exist in the same content signal and still be detected 
accurately. 

The digital watermark embedding protocols can be designed such that if content is 
shared, causing it to be embedded with two or more forensic watermarks, the quality of 
the content degrades. If it requires several embedders to make the watermark 
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unrecoverable with averaging or over-embedding attacks, the resulting content is 
degraded and of reduced value. 

Further features will become apparent with reference to the following detailed 
description and accompanying drawings. 

Brief Description of the Drawings 

Fig. 1 shows an overview of the forensic tracking watermark application. 
Fig. 2 illustrates a method for forensic watermark embedding in a content signal 
delivery system. 

Fig. 3 illustrates a method for generational tracking of content using digital 
watermarking. 

Fig. 4 illustrates a video set top box system with a forensic watermark embedder. 
Fig. 5 illustrates an Internet server with a forensic watermark embedder. 
Fig. 6 illustrates the configuration of forensic watermarking embedders for 
collage attack. 

Fig. 7 illustrates the configuration of forensic watermarking embedders for 
collusion attack. 

Detailed Description 

Fig 1 shows an overview of the forensic tracking application for a premium TV 
broadcast with a soon to be common home network with personal video recording (PVR) 
functionality. This specific example helps describe the forensic tracking environment, 
but forensic tracking is applicable to many environments, including online streaming of 
music as provided by MusicNet and PressPlay. Premium content 10 is embedded with a 
content ID and broadcast to a home. The home PVR 12 embeds a forensic ID, such as a 
32 bit manufacturer code and 24 bit manufacturer ID, and records the content to its hard 
drive. The content can be viewed on a legacy TV 14 and recorded to a legacy device 18 
via a traditional analog connection. The analog connection is required for the legacy TV 
14, and during analog connection, the encryption based security wrapping the content is 
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removed. In addition, legacy device 16 does not know how to protect the content. Thus, 
legacy device 16 may be a PC connected to the Internet or the legacy device 18 can 
transfer the content to a PC. This PC can digitally compress the content and could be 
running file sharing software, such as KazaA, which allows others to download this 
5 premium content 10 and watch it for free since it is not protected. However, due to the 
watermarked forensic ID in premium content 10, content owners can download content 
from the file sharing network, such as KazaA, and read the watermarked forensic ID 
which remains in the content through analog connections and digital compression. Then, 
the forensic ID can be used to locate the manufacturer of the PVR 12 and search their 
10 database for the user's name and address, such that the user can be stopped from sharing 
copyrighted materials. This process assumes the correct privacy actions were taken 
n within that country and state. 

Some practical facts that are important in many forensic tracking watermark 
S3 applications can be learned from this example. Since the embedder is located in a 

rj 15 consumer device, the embedder must be inexpensive. The embedder must also be real- 
time. Since the content owner owns the detector, it can be a powerful piece of equipment 
^ that can use a lot of time and processing power to find the watermark. In addition, since 

there is no interactivity requirements, such as required when using a content ID for 
Lij interactive TV, the speed of detection and amount of content used to detect the 

p 20 watermark can be large. In forensic watermark detection, the whole piece of content, 
such as complete song, image or movie, is expected to be available, the detector has a 
greater opportunity to find the forensic watermark somewhere in the content. If the entire 
content is not available, is value is degraded and is of less concern. 

With point-to-point distribution, as currently used with Internet streaming, these 
25 requirements are similar. However, since the server knows the receiving account, the 
server can perform the embedding, which slightly reduces the cost requirement on the 
embedder. 

Fig. 2 illustrates a method for forensic watermark embedding in a content signal 
delivery system. The content delivery system delivers audio- visual content, such as 
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videos and music to a network of receivers, such as set-top boxes, computers, televisions, 
etc. Since the method is generally applicable to a variety of broadcast content, Fig. 2 
represents the content generally as a "media content signal" 100. This signal represents a 
content title, such as a program, movie, or song. 
5 At the broadcast side of the system, the broadcaster may optionally perform a 

watermark embedding operation 102 on the signal 100 to add a distributor identifier (ID) 
104 according to an embedding protocol. The protocol specifies parameters of the digital 
watermark embedding operation, such as a carrier key used to modulate the message 
payload of the watermark, and a mapping key to map the message payload to features or 

10 samples of the host content signal. One example of carrier key is a pseudorandom 

number that acts as a carrier signal for the message payload. The message may modulate 
the carrier using a variety of techniques, such as XOR, multiplication, convolution, phase 
shifting the carrier, adding shifted versions of the carrier together, etc. 

One example of a mapping key is a table that specifies a relationship between 

15 message symbols of the message payload and corresponding samples or features of the 
host signal that will be modified to embed those symbols. 

The digital watermark, in addition to carrying the message payload, includes a 
synchronization or calibration component that enables its detection in a potentially 
corrupted version of the content signal. This component is an attribute of the watermark, 

20 such as peaks in a particular transform domain (e.g., the autocorrelation or Fourier 

domain), a sequence or pattern of known message symbols, or some combination. The 
synchronization component enables a detector to search through a corrupted signal and 
identify the presence and origin of a watermark, and in some cases, temporal and spatial 
distortion of the signal. The synchronization component may be signal peaks or pattern 

25 of the carrier key, signal peaks or pattern formed by mapping symbols to the host via the 
mapping key, or some independent signal component with known peaks or a pattern that 
assists in detection. 

The distributor ID identifiers the source of the broadcast. This might include, for 
example, a cable service provider, a subscription service provider, broadcaster, etc. The 
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embedding of this distributor ID is illustrated as optional at the broadcaster because it is 
not a necessary component of forensic tracking functions, and in any event, may be 
embedded at the receiver side or identified using an out-of-band metadata associated with 
the content signal. 

5 The broadcaster 108 distributes the content signal to two or more receivers 112, 

212, 224 over a broadcast medium 110. This medium may be a conventional terrestrial 
broadcast carrier, a satellite broadcast, cable broadcast, Internet download or multicast, 
etc. 

Forensic tracking is enabled when the receivers embed a forensic watermark in 
10 the content titles they receive. This forensic watermark is associated with a particular 
receiver through a forensic ID. The forensic ID, in particular, is encoded into a variable 
message payload of the forensic watermark. In addition, the forensic ID is associated 
with the receiver device. This device may be a set top box, personal video recorder, 
television, etc. 

15 Generational forensic tracking is enabled when a subsequent receiver of the media 

content signal embeds another layer of its forensic watermark in the content signal as it is 
passed from one receiver device to another. For example, networked devices like 
computers, set-top boxes, and PVRs enable users to transfer copies of the content signal 
to each other. Upon receipt of the copy, the receiver embeds its forensic watermark. 

20 This process adds another layer of forensic watermark, each providing a reference to the 
receiver device. 

To minimize interference between watermark layers and make the forensic 
watermark robust to averaging attacks, the receivers select an embedding protocol and/or 
embedding orientation that varies from one receiver to the next. Defined previously, the 
25 embedding protocol may include a different carrier signal, such as a pseudo random 
number sequence orthogonal to the carrier of one or more of the carriers in other 
protocols. The protocol may also include a different mapping function, which maps the 
watermark message symbols to different locations or features within the host media 
content signal. 
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Signal "features" in this context are particularly relevant in watermarking 
techniques that modulate features of the host signal to encode the message symbols of the 
forensic watermark. Some examples of such an embedding technique include setting 
features like auto-correlation, power, intensity, frequency coefficients, spatial domain 
objects to a particular value corresponding to a symbol to be embedded. 

The embedding orientation refers to the spatial, temporal or frequency domain 
location of the forensic watermark signal. In an audio- visual work, such as a movie with 
a sound track, the spatial location refers to some spatial location in selected spatial area, 
e.g., a matrix of pixel block locations (e.g., every fifth 128 by 128 pixel block in a frame). 
The watermark can use all of the pixels in the frame, where the origin is randomly chosen 
and the watermark is wrapped around the edges of the frame. Thus, each instance of a 
forensic watermark layer completely overlaps, but does not interfere since the protocols 
are not perfectly aligned. Alternatively, a portion of the frame can be used as the matrix 
of pixels used to carry the watermark. In this case, different watermarks may or may not 
overlap. 

The temporal location refers to the watermark's orientation over the time of the 
content with a temporal component, such as audio or video. As described for spatial 
location, the watermark embedding method can use the whole duration of the audio or 
video, with different beginning orientation, or the watermark embedding method can use 
time segments of the content, such as a frame or frames of video or a clip of audio having 
a pre-determined duration. The different beginning orientation can include leaving a 
small portion of the content un-watermarked at the beginning or wrapping the watermark 
around the content such that the beginning of the content contains the end of the 
watermark data payload. Once again, with different beginning orientation, each 
watermark layer completely overlap but with different alignment of the carrier signals 
which reduces interference. When using time segments, each watermark layer, may or 
may not overlap. 

The frequency location refers to a selected orientation of watermarks within the 
complete frequency range of the content, or a set of frequency coefficients or frequency 
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band. This may be the spatial frequency of a frame of video or an image, a frequency 
band of a clip of audio, or temporal frequency of a set of frames of video. When using a 
frequency band, the frequency bands may be preset and the embedder chooses from this 
set or the range is preset and the embedder chooses the actual coefficients to match that 
5 range. Some forensic watermarking techniques can vary the frequency band range, too. 
The potential overlap of each watermark layer is the same as described above, but, most 
importantly, the alignment is different and interference among different forensic 
watermarks is greatly reduced. 

The embedding orientation is preferably related to the mapping key of the 

10 protocol such that the mapping key specifies an allowed set of possible orientations for a 
particular device or class of devices, while the orientation selected at a particular instance 
of embedding the forensic watermark in the device is selected from among that allowed 
set. The orientation may be pseudo randomly selected from among options specified in 
the allowed set of orientations. When different orientations are used, the same 

15 modulation functions do not have as much interference as when they are perfectly 

overlapped. Specifically, with spread-spectrum techniques that use pseudo-random noise 
(PN) sequences, if the PN sequences are not perfectly aligned they will not interact. This 
occurs by definition of a PN sequence since each point is independent of the other point. 
To avoid interference, different PN sequences can be used for the carrier key. 

20 To illustrate how the embedders vary the protocol and/or orientation, it is useful 

to refer to the example in Fig. 2. As shown, each receiver includes a forensic watermark 
embedder 122, 222 that imperceptibly embeds a forensic ED 1 14, 214 in a digital 
watermark carried in the media content signal following a protocol 1 16, 216. In Fig. 2, 
the receivers employ different embedding protocols (shown as protocol B and C). In 

25 addition, or in the alternative, the receivers embed the forensic watermarks at a different 
orientation. 

In one implementation, each embedder is pre-specified with its own unique 
protocol. In this implementation, the interaction of two embedders is minimized, but if 
two devices have overlapping protocols, they interfere with each other. In order to make 
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sure two embedders do not interfere with each other, a central database needs to be 
maintained and protocols assigned using the central database to ensure embedders will 
have non-interfering protocols. 

In another implementation, each embedder varies the embedding for each instance 
5 of a particular content item by selecting a different protocol and/or orientation. This 
means that two embedders may interfere in one segment of content, but not with other 
content nor other segments. In other words, collusion or collage attack will require more 
embedders to be successful, thus increasing the cost and degrading the content. One way 
to select the protocol and orientation is to select each from an allowed set using a pseudo 

10 random function 120, 220. For example, the protocol may have an allowed set of 1000 
carrier keys, or 1000 mapping functions. Additionally, each embedder may include an 
allowed set of N orientations. As noted, these orientations may be a function of the 
mapping key, where each mapping key has an allowed set of orientations. 
In the example shown in Fig. 2, this pseudorandom function varies according to local 

15 data, such as the time or date, which changes from one instance of embedding the 
forensic watermark to the next. 

Preferably, the embedders vary the forensic watermark from one device to another 
in a manner that reduces the effectiveness of averaging attacks. By using protocols 
and/or orientations that reduce interference between different forensic watermarks, the 

20 impact of averaging to copies of a content signal with different forensic watermarks is 
diminished. Certain aspects of the forensic watermark, such as the synchronization 
component may be similar for each copy, and therefore, averaging has little or no impact 
on it. 

A specific example is as follows. Assume an embedder requires 1 second to 
25 embed the forensic ID. If the embedder embeds the forensic ID once on average in every 
30 seconds of audio or video content, using a Poisson probability process or Gaussian 
distribution, where the starting seed is different for each piece of content and embedder, 
such as basing the starting seed on an embedder ID and current time with millisecond 
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accuracy, the interaction of two embedders in 3 minutes of content, the length of many 
songs, or 90 minutes of content, the length of many movies, is very unlikely. 

Similarly, the location within an image or frame of a video can be randomly 
chosen. Or the orientation of the carrier signal can be randomly chosen. 
5 Combining the above example approaches with choosing from a different set of 

random watermark carrier signals, the interference of several forensic watermarks 
becomes unlikely. Thus, improving robustness to averaging and over embedding attacks. 

Another advantage of the variable embedding approach is that it enables 
generational tracking where forensic watermarks are layered onto each other in a content 
10 signal as it moves from one device to the next. Since the variable embedding reduces 
interference between different forensic watermarks, multiple watermarks may be 
embedded with less impact on detectability of each. 

Generational tracking can be enabled with standard non-variable embedding 
methods, by knowing or detecting the presence of a watermark layer and choosing a new 
1 5 watermark layer that has specifically been designed with a different non-interfering 
protocol. However, although this method is optimal in many situations, for many 
forensic tracking applications where the embedder is located in the consumer device 
requires the embedder to also detect the watermark, thus increasing its cost. Even for 
server based forensic tracking embedders used in Internet streaming, the cost is a large 
20 requirement. To this end, the variable embedding approach enables generational forensic 
tracking at a reduced cost 

Fig. 3 illustrates a method for generational tracking of content using digital 
watermarking. This diagram shows an example where a media content signal 300 passes 
through three receivers, each time receiving a forensic watermark associated with that 
25 receiver. Optionally, the receivers may include a watermark detector 302 to detect a 

previous layer or layers of forensic or distributor watermarks. This enables the embedder 
to select a watermark orientation and/or protocol that minimizes interference with 
existing watermark layers. However, if properly designed, interference will usually be 
minimal, and thus, a detector is not necessary. 
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The watermark embedder 304 embeds a forensic watermark ID according to the 
local protocol (306, protocol B) in the device. In one implementation, the embedding 
operation modulates the forensic ID with a pseudo random number serving as the carrier 
key, and maps the resulting signal to block locations within frames of the content signal. 
5 This intermediate signal is then embedded in corresponding samples according a 
perceptual masking function and embedding function that adjusts the samples in a 
manner that encodes the modulated signal at strength commensurate with the masking 
capability measured by the masking function. 

The first generation device then transfers the signal to some shared channel, such 
1 0 as portable memory device, networked storage location, etc. Subsequent generations 

310, 312 within different receivers perform the same functions to embed additional layers 
of forensic watermarks. 

The above application of forensic watermarking preferably uses a 
computationally efficient method of embedding so that it can be implemented in 
15 receivers, such as set-top boxes, PVRs, PCs, etc. with minimal interruption of the normal 
processing flow of content signals. Preferably, the receiver device embeds the forensic 
watermark in the content as it is being stored in the device. Alternatively, it is embedded 
as it is received in the device. 

In one implementation for video, the embedder employs a version of the 
20 embedding technique described in co-pending application serial number 09/503,881 and 
US Patent 6,122,403. The embedder generates an error correction encoded binary 
antipodal sequence corresponding to the forensic ID, spreads each bit of this sequence 
over a PN binary antipodal carrier key by multiplying each bit with the corresponding 
carrier key to form an intermediate signal, and maps elements of the intermediate signal 
25 to locations within selected blocks of the video. A perceptual analysis calculates data 
hiding capacity as a function of local spatial and temporal signal activity. This analysis 
produces a mask of gain values corresponding to locations with the host signal used to 
control embedding of the intermediate signal into the host signal. The gain values adjust 
the strength of the intermediate signal at the corresponding locations in the host signal. 
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To complete embedding, the embedder adjusts the level of the host signal according to 
the corresponding value of the intermediate signal and the gain value. 

For synchronization, a known pattern is mapped to locations within the host 
signal This known pattern exhibits peaks in the Fourier domain that enable detection 
5 and synchronization. This synchronization signal may be an integrated component of the 
carrier key and/or a separate signal component. The perceptual mask applies to this 
component as well. 

Due to the nature of the application, the computational complexity of the forensic 
watermark detector is less of a constraint for the system design. Forensic analysis of a 
1 0 media content signal may be performed off-line in a powerful server computer or even 
invoke parallel processing across multiple computers or processors. 

Typically, in a forensic watermark application, the content owner or distributor 
monitors for illegal distribution of its content. This may include manual searching or 
automatic searching on the Internet, in unauthorized file sharing systems, etc. When a 
15 suspect content title is found, the suspect media signal 400 is input to a forensic 
watermark detector 402 as shown in Fig. 3. 

First, the detector searches for the synchronization signal, using, for example, a 
correlation function to detect the synchronization peaks and/or pattern. Different 
protocols may use the same or different synchronization signal. If separate, the detector 
20 iterates through possible synchronization signals to detect the presence of forensic 
watermarks. 

Once synchronized, the detector proceeds to extract the digital watermark payload 
by estimating the values of the intermediate signal, combining the estimates for each 
error correction encoded bit according to the mapping function, and then performing 
25 inverse error correction coding to recover the forensic ID. 

The detector may use a similar approach to extract a distributor ID, if one exists, 
along with any other forensic IDs. The distributor ID can be used to provide a pointer to 
the distributor. In this case, the detector sends a list of the forensic IDs found to the 
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distributor as shown in block 404 of Fig. 3, along with a content ID identifying the 
content title. 

For certain aspects of this variable embedding approach, there are cost tradeoffs. 
For example, increasing the number of carrier keys or mapping keys increases the cost in 
5 both the embedder and detector. The embedder must store these keys and the detector 
must be capable of detecting forensic watermarks using these keys. However, changing 
the watermark's orientation, such as over time, location, and frequency, there are minimal 
cost increases to the embedder. 

In addition, it may be optimal if each forensic tracking watermark is embedded at 
10 a maximum strength. In other words, if the strength of the watermark is increased, its 
perceptibility, such as visibility in images and video or audibility in audio, is 
q unacceptable. This process can be optimal since adding watermark layers will degrade 

*~ the content in similar fashion to increasing the strength. However, due to the 

independence of each watermark layer, the degradation of the content will usually happen 
: j 15 at a slower rate than increasing the amplitude of the carrier for a single watermark layer. 
4 In the end, the collage or collusion attack results in degraded, less valuable content. This 

must be balanced with the desires of generational tracking. For example, three 
generations may be all that the content owner wants to enable. As such, the fourth 

LU watermark layer can produce objectionable degradation, which means that a collusion or 

P 

P 20 collage attack requiring four or more embedders is minimally effective. In another 
example, the content owner may not want to enable file sharing, and as such, it is 
acceptable if two watermark embedders produce content degradation. 

Fig. 4 shows an apparatus for embedding forensic watermarks in a broadcast 
environment. The receiver 400, which may be a STB and/or PVR for television or a 
25 tuner for radio, receives the broadcast signal and embeds the watermark. For TV, most 
STBs and PVRs include a media processor 410 to handle the content and a CPU 420 to 
handle the interactivity. The watermark embedder can be software running on the media 
processor 410 or CPU 420, hardware integrated with either component, assuming the 
CPU can access the content stream, or a stand alone hardware chip integrated with the 
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receiver. For radio, the receiver architecture is currently simpler, and the forensic 
embedder will probably be a stand-alone hardware chip. If radio moves to include more 
interactivity, such as with digital satellite radio, the configuration may become closer to 
that of TV. 

5 Fig. 5 shows an apparatus for embedding forensic watermarks in a point-to-point 

Internet streaming environment, either for audio or video. An Internet streaming server 
500 can embed the watermark. The server 500 is usually a PC or PC-like device that 
includes memory 510 and CPU 520. The memory 510 can be used to store the 
watermarking protocl and CPU 520 can be used to use the watermarking protocol to 

10 embed the forensic watermark with the forensic ID that identifies the receiving client 
software of the stream and the manufacturer of the client software.Fig. 6 shows the 
configuration of forensic watermark embedders for the collage attack. This configuration 
assumes the consumer device includes the forensic watermark embedder as required for 
broadcasts and Internet multi-casts, but is not required for Internet unicasts. Several 

15 embedders, such as embedder- 1 600, embedder-2 610, and so on to embedder-N 620, are 
configured in series so that each embedder adds a different forensic watermark to the 
content. The goal is that the content coming out of Embedder-N 620, as represented by 
the arrow, is of reasonable quality and has so many watermarks that the detector cannot 
read any forensic watermark. With television, each embedder could be a STB or PVR. 

20 Fig. 7 shows the configuration of forensic watermark embedders for the collusion 

attack. This configuration assumes the consumer device includes the forensic watermark 
embedder as required for broadcasts and Internet multi-casts, but is not required for 
Internet unicasts. Several embedders, such as embedder- 1 700, embedder-2 710, and so 
on to embedder-N 720, are configured in parallel, and connected to a content mixer 730 

25 such that each embedder adds a different forensic watermark to the content and the mixer 
averages all of these watermarks. The goal is that the content coming out of mixer 730, 
as represented by the arrow, is of reasonable quality and has so many watermarks that the 
detector cannot read any forensic watermark. With television, each embedder could be a 
STB or PVR, and the signal mixer could be a profession video mixer. The mixer could 
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also easily be done as a custom program on a PC with a video capture and production 
board. For Internet streaming of audio or video, the embedders could be located within 
several PCs, each with its own receiving client, or several clients on one PC. 

Concluding Remarks 

Having described and illustrated the principles of the technology with reference to 
specific implementations, it will be recognized that the technology can be implemented in 
many other, different, forms. To provide a comprehensive disclosure without unduly 
lengthening the specification, applicants incorporate by reference the patents and patent 
applications referenced above. 

The methods, processes, and systems described above may be implemented in 
hardware, software or a combination of hardware and software. For example, the 
auxiliary data encoding processes may be implemented in a programmable computer or a 
special purpose digital circuit. Similarly, auxiliary data decoding may be implemented in 
software, firmware, hardware, or combinations of software, firmware and hardware. The 
methods and processes described above may be implemented in programs executed from 
a system's memory (a computer readable medium, such as an electronic, optical or 
magnetic storage device). 

The particular combinations of elements and features in the above-detailed 
embodiments are exemplary only; the interchanging and substitution of these teachings 
with other teachings in this and the incorporated-by-reference patents/applications are 
also contemplated. 



